Privacy

The short version

This website sets no cookies, runs no analytics, contains no tracking of any kind and loads nothing from third-party servers. It has no contact form. You can read every page without giving us anything and without us building any profile of you.

Who is responsible

The controller for any personal data processed through this site is Maria Cassar Sultana, trading as The Cozy Corner Art Cafe, Church Street, Xewkija, Gozo, Malta.

Telephone 7955 9227. Email: Show email addressHidden from spam bots — one click to reveal.

Server log files

When you open a page, our hosting provider automatically records technical data, as every web server does. This is the only data collected without you doing anything:

• the IP address your request came from
• the date and time of the request
• the page or file requested
• the referring page, if any
• your browser and operating system version

Why we may process that, and for how long

The legal basis is Article 6(1)(f) GDPR, our legitimate interest in delivering the site reliably and in recognising and defending against attacks on it. We do not use this data to identify individual visitors and we do not combine it with anything else.

Log data is kept only for as long as our hosting provider retains it for operational and security purposes, and is then deleted automatically.

Hosting

This site is hosted by Vercel Inc., based in the United States, acting as our processor under Article 28 GDPR. Because of that, technical data such as your IP address may be transferred outside the European Economic Area.

Two safeguards cover that transfer under Chapter V GDPR. Vercel is certified under the EU-U.S. Data Privacy Framework, and its Data Processing Addendum additionally incorporates the EU Standard Contractual Clauses. The addendum is published at vercel.com/legal/dpa and the certification is listed on the public Data Privacy Framework register.

Cookies, analytics and tracking

There are none. No cookies are set, nothing is written to local or session storage, and no analytics, advertising, heat-mapping or consent-management service is loaded. Fonts are served from our own domain rather than from a font provider, so no request about you leaves this website while you read it.

Links that take you elsewhere

Three links lead off this site: a WhatsApp link, a Google Maps link and a credit link to the agency that built the site. Nothing is transmitted to those services while you are simply reading a page. Data only reaches them at the moment you click, and from that point their own privacy policies apply, not this one.

If you call, message or book

When you telephone us or write to us on WhatsApp, we process what you tell us — typically a name, a phone number, a date and the size of your party — in order to answer you and to hold your booking. The legal basis is Article 6(1)(b) GDPR, taking steps at your request before entering into a contract, and Article 6(1)(f) for ordinary correspondence.

We keep booking details only as long as we need them for the booking itself and for any obligation to retain records that applies to us. We do not use your number for marketing and we do not pass it to anyone else.

WhatsApp is operated by Meta Platforms Ireland Ltd. If you contact us that way, Meta processes the message as well, under its own privacy policy. If you would rather not use it, please call instead.

Your rights

Under the GDPR you have the right to:

• ask what personal data we hold about you and receive a copy (Article 15)
• have inaccurate data corrected (Article 16)
• have your data erased (Article 17)
• have processing restricted (Article 18)
• receive your data in a portable format (Article 20)
• object to processing based on legitimate interest (Article 21)

How to exercise them, and how to complain

Write to us at Show email addressHidden from spam bots — one click to reveal., call 7955 9227, or use the postal address above. We will respond within one month.

If you believe we have handled your data unlawfully, you can lodge a complaint with the supervisory authority. In Malta this is the Office of the Information and Data Protection Commissioner (IDPC), Floor 2, Airways House, High Street, Sliema SLM 1549, Malta — idpc.org.mt. You may also complain to the authority where you live or work.

Changes to this notice

If we change how the site works, we will update this page and the date shown at the top of it.